MazaFard

Uncovering a Massive GitHub Supply Chain Attack: When a Friend's Repo Bites Back

Wed, 29 Apr 2026 00:00:00 +0000

During a routine code review of a colleague’s GitHub repository, I identified an anomalous, highly obfuscated block of code embedded within a standard Python file. The use of randomized variable names and dense encoding strongly indicated malicious intent. Upon further investigation, this isolated finding revealed a sophisticated, large-scale supply chain attack currently affecting hundreds of repositories across GitHub.

This article details the discovery, the reverse-engineering process, and actionable mitigation strategies to secure your development pipelines.

Introducing Django AI Validator: When Regex Isn't Enough

Mon, 01 Dec 2025 00:00:00 +0000

Regex is perfect for emails, postal codes, and other tidy little strings. It completely falls apart when the requirement sounds like, “make sure this bio feels professional” or “double-check that the listing actually describes a car.” You can throw more patterns at it, but you’re still judging syntax, not meaning.

Django AI Validator is my answer for the semantic gap. It’s a fresh PyPI package that lets your Django fields tap into modern LLMs (OpenAI, Anthropic, Gemini, or even local Ollama) for on-the-fly validation and cleaning.

TermForge: Modernizing My Terminal Workflow

Thu, 27 Nov 2025 00:00:00 +0000

I’ve always liked the original jazik/termenv project—it’s a clean Ansible playbook that bootstraps a great terminal environment. But after living in it for a while, I found myself wanting tighter macOS support, automatic iTerm2 provisioning, and some Kubernetes-focused tooling. I decided to fork the project and build out those extra pieces. The result is TermForge, my refreshed take on the “terminal in a box” idea.

Why Fork Instead of PR?

Initially, I explored incremental improvements to the upstream repo. Pretty quickly the changes snowballed—new playbooks, an opt-in name change, macOS-only roles, documentation rewrites, and Kubernetes helpers that modify multiple files. Rather than disrupt the original’s scope, I forked it and leaned into a new project identity while crediting the original work.

C++ Resource Management: The Complete Picture

Wed, 26 Nov 2025 00:00:00 +0000

Let’s talk about keeping our C++ code clean and safe, specifically focusing on preventing those nasty memory leaks using Smart Pointers.

1. The Headache: Raw Pointers and Leaks

The biggest headache with raw pointers (like int* data = new int(10);) is that you have to clean them up yourself (delete data;). If your function bails out early because of an error, a return statement, or an exception, that delete statement gets skipped.

Linear Algebra: Beyond Numbers, A Language for Change

Mon, 24 Nov 2025 00:00:00 +0000

Exploring Linear Algebra not just as math, but as a language for change and connection in multi-dimensional space.

Why Zero and Even Numbers Aren't Prime?

Mon, 24 Nov 2025 00:00:00 +0000

A quick chat about why zero and even numbers (except 2) don't make the cut as prime numbers.

Working with VS Code (Reluctantly!)

Sat, 22 Nov 2025 00:00:00 +0000

A bit of a rant about VS Code and a tip on separating untracked files from changes.

Working with K8s and K9s

Sat, 22 Nov 2025 00:00:00 +0000

A quick chat about Kubernetes (K8s) and K9s, what they are, and why they're awesome.

How to Become a Hacker

Sat, 14 Sep 2024 00:00:00 +0000

A guide to becoming a hacker and understanding hacker culture.

Entering Age 36

Fri, 06 Sep 2024 00:00:00 +0000

My experiences and feelings at age 36 after migrating and starting a company.

Features / Mods

Wed, 20 Jan 2021 00:00:00 +0000

Learn About All Features in PaperMod

Article 1 Tax Base

Fri, 06 Sep 2024 00:00:00 +0000

The Personal Income Tax (IRS) is levied on the annual value of income from the following categories, even if derived from illegal activities, after the corresponding deductions and allowances have been made:
1. Category A - Income from dependent work;
2. Category B - Business and professional income;
3. Category E - Income from capital;
4. Category F - Property income;
5. Category G - Capital gains;
6. Category H - Pensions.
Income, whether in cash or in kind, is subject to taxation regardless of where it is earned, the currency, or the manner in which it is received.

Markdown Syntax Guide

Mon, 11 Mar 2019 00:00:00 +0000

Sample article showcasing basic Markdown syntax and formatting for HTML elements.

Rich Content and Shortcodes

Sun, 10 Mar 2019 00:00:00 +0000

A brief description of Hugo Shortcodes

Math Typesetting

Fri, 08 Mar 2019 00:00:00 +0000

A brief guide to setup KaTeX

Hello, World!

Mon, 01 Jan 0001 00:00:00 +0000

Hello World!

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut non lorem diam. Quisque vulputate nibh sodales eros pretium tincidunt. Aenean porttitor efficitur convallis. Nulla sagittis finibus convallis. Phasellus in fermentum quam, eu egestas tortor. Maecenas ac mollis leo. Integer maximus eu nisl vel sagittis.

Suspendisse facilisis, mi ac scelerisque interdum, ligula ex imperdiet felis, a posuere eros justo nec sem. Nullam laoreet accumsan metus, sit amet tincidunt orci egestas nec. Pellentesque ut aliquet ante, at tristique nunc. Donec non massa nibh. Ut posuere lacus non aliquam laoreet. Fusce pharetra ligula a felis porttitor, at mollis ipsum maximus. Donec quam tortor, vehicula a magna sit amet, tincidunt dictum enim. In hac habitasse platea dictumst. Mauris sit amet ornare ligula, blandit consequat risus. Duis malesuada pellentesque lectus, non feugiat turpis eleifend a. Nullam tempus ante et diam pretium, ac faucibus ligula interdum.

privacy

Mon, 01 Jan 0001 00:00:00 +0000

Privacy Policy for Ponti

Effective Date: 8 October 2024

1. Introduction Ponti (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, and safeguard your personal data when you use our app.

2. Information We Collect

Personal Data: We may collect personal information such as your name, email address, and language preferences when you sign up for our app or services.
Usage Data: We automatically collect information on how you use the app, including device information, app interactions, and IP address.
Children’s Privacy: Our app is not intended for children under 13, and we do not knowingly collect personal information from them. If we become aware of any such data, we will delete it immediately.

3. How We Use Your Data

Terms of Use

Mon, 01 Jan 0001 00:00:00 +0000

Terms of Use

Effective Date: October 8, 2024

Welcome to Ponti! These Terms of Use (“Terms”) govern your use of our app and services. By downloading, installing, or using Ponti, you agree to these Terms, so please read them carefully.

1. Acceptance of Terms

By accessing or using Ponti, you agree to be bound by these Terms and our Privacy Policy. If you do not agree, please do not use our app.